CVE-2007-5037

N/A

Descricao

Buffer overflow in the inotifytools_snprintf function in src/inotifytools.c in the inotify-tools library before 3.11 allows context-dependent attackers to execute arbitrary code via a long filename.

Detalhes CVE

Pontuacao CVSS v3.1N/A

Publicado9/24/2007

Ultima modificacao4/23/2026

Fontenvd

Avistamentos honeypot0

Produtos afetados

inotify:inotify-tools

Fraquezas (CWE)

CWE-119

Referencias

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=443913(cve@mitre.org)

http://osvdb.org/40563(cve@mitre.org)

http://secunia.com/advisories/26825(cve@mitre.org)

http://secunia.com/advisories/27616(cve@mitre.org)

http://secunia.com/advisories/28221(cve@mitre.org)

http://sourceforge.net/project/shownotes.php?release_id=540277&group_id=171752(cve@mitre.org)

http://www.debian.org/security/2007/dsa-1440(cve@mitre.org)

http://www.securityfocus.com/bid/25724(cve@mitre.org)

https://exchange.xforce.ibmcloud.com/vulnerabilities/36687(cve@mitre.org)

https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00228.html(cve@mitre.org)

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=443913(af854a3a-2127-422b-91ae-364da2661108)

http://osvdb.org/40563(af854a3a-2127-422b-91ae-364da2661108)

http://secunia.com/advisories/26825(af854a3a-2127-422b-91ae-364da2661108)

http://secunia.com/advisories/27616(af854a3a-2127-422b-91ae-364da2661108)

http://secunia.com/advisories/28221(af854a3a-2127-422b-91ae-364da2661108)

http://sourceforge.net/project/shownotes.php?release_id=540277&group_id=171752(af854a3a-2127-422b-91ae-364da2661108)

http://www.debian.org/security/2007/dsa-1440(af854a3a-2127-422b-91ae-364da2661108)

http://www.securityfocus.com/bid/25724(af854a3a-2127-422b-91ae-364da2661108)

https://exchange.xforce.ibmcloud.com/vulnerabilities/36687(af854a3a-2127-422b-91ae-364da2661108)

https://www.redhat.com/archives/fedora-package-announce/2007-November/msg00228.html(af854a3a-2127-422b-91ae-364da2661108)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.